NvidiaNVIDIA:5405Security Notice: NVIDIA Response to OpenSSL Vulnerabilities - November 2022
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.062 Low
EPSS
Percentile
93.5%
This notice is a response to the OpenSSL vulnerabilities detailed in CVE‑2022‑3786 and CVE‑2022‑3602.
Go to NVIDIA Product Security.
Update November 30, 2022:
NVIDIA can confirm that none of its products are affected by these vulnerabilities.
November 1, 2022:
NVIDIA is aware of these vulnerabilities and is thoroughly evaluating its systems’ software to determine their potential impact and relevance to its products and services. NVIDIA is taking appropriate steps to reduce any potential impact and release necessary fixes. As the situation develops, NVIDIA will continue to evaluate exposure across its portfolio of products.
This page will be updated when any additional information regarding this issue becomes available. Please actively monitor this page for information about affected products and available mitigations or updates.
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.062 Low
EPSS
Percentile
93.5%